What this site does with your data.
Written from the code that runs on this site, not from a template. Nothing beyond what keeps the site working is stored until you choose to accept analytics, and you can change that choice at any time.
Last updated 19 August 2026
Scope
This notice covers the public website at meramia.com. It does not cover client engagements — those are governed by the contract signed for the engagement — and it does not cover any third-party site you reach from a link here.
Before you choose, nothing non-essential runs
Analytics are switched off by default. Google consent signals are set to denied before any Google script is allowed to load, so on a first visit no analytics cookie is written and no analytics request is made. The only thing stored before you decide is nothing at all; your decision itself is stored once you make it.
If you accept analytics
Two things start, and only these two:
- Google Analytics 4, with IP anonymisation on. Only the analytics consent signal is granted. The advertising signals stay denied, because this site runs no advertising and does not build advertising audiences.
- A first-party record of how you found us, kept in this browser and in a first-party cookie. It holds: a random visitor identifier; the page you first arrived on and the page you most recently arrived on, each with a timestamp; the external site you came from, if any; campaign parameters in the link you followed (the standard utm parameters, plus Google and Meta click identifiers); a count of visits; and the Google Analytics client identifier, so an enquiry can be connected to the visit it came from.
The visitor identifier is a random value. It is not derived from your name, your address, or anything you typed, and it is not shared with anyone.
If you decline
No analytics script loads and no visitor record is created. Only your choice is remembered, so you are not asked on every page.
If you accepted earlier and then decline, the withdrawal is real rather than cosmetic: Google Analytics is told to stop, and the visitor identifier and the visit record are deleted from this browser.
Cookies and browser storage
| Name | Where | Why | Kept for |
|---|---|---|---|
| meramia-consent | Cookie and local storage | Essential — remembers your analytics choice | Two years |
| meramia_vid | Cookie | Analytics — the random visitor identifier | Two years |
| meramia_visit | Local storage | Analytics — first and most recent visit, campaign parameters, visit count | Until you decline or clear this browser |
| meramia_session | Session storage | Analytics — counts one visit per browser tab | Until the tab closes |
| _ga and _ga_… | Cookie, set by Google | Google Analytics | Set by Google, typically two years |
| meramia_contact_queue | Local storage | Holds an enquiry that could not be delivered, so it can be retried | Up to seven days |
Only the first of these is written regardless of your choice; it exists so the site can honour the choice you made.
The enquiry form
The form asks for your name, your company, your email address, the service you are interested in, and your message. When you send it:
- It is delivered as an email to a monitored Meramia mailbox, with your address set as the reply address so we can answer you directly.
- It is not written to any database. Sending that email is the only thing the backend does with it; nothing is stored server-side, and the content of your enquiry is never written to our application logs.
- Delivery is handled by Amazon Web Services in the Europe (Ireland) region, so your enquiry is processed outside the UAE.
- If you have accepted analytics, the attribution record described above is transmitted alongside the form so an enquiry can be connected to the visit it came from. The backend does not currently read, email, log or store it.
- The form carries a hidden field that real people never fill in. If it is filled in, the submission is treated as automated and discarded.
If an enquiry cannot be delivered
When the network or the backend fails, your enquiry is kept in this browser so it can be retried rather than silently lost. That copy holds what you typed and, if analytics are accepted, the attribution record. It is deleted as soon as the enquiry is delivered, and it expires after seven days.
Expiry is checked the next time you open the site, not on a timer — so if you never return, the copy stays in your browser until you clear it. On a shared or public computer, clearing your browser data is the reliable way to remove it.
What is never sent to analytics
Your name, your email address, your company and your message are never included in any analytics event. Only the service you selected, whether the send was a retry, and how many visits preceded the enquiry are measured. This is enforced automatically: the pre-deploy quality gate fails the build if any of those four field names appears in an analytics payload.
Your choices
- Change your analytics choice at any time with the Manage cookies control in the footer of every page.
- Clear everything by clearing cookies and site data for this site in your browser.
- Your browser's Do Not Track or global privacy controls do not switch analytics on; nothing loads unless you accept.
Your rights
Under the UAE Personal Data Protection Law you may ask what personal data we hold about you, ask for it to be corrected or deleted, object to or restrict its processing, and withdraw a consent you gave. Because this site stores nothing about you on a server, most requests concern the email you sent us.
To make a request, use the enquiry form and say what you are asking for. We reply within one UAE business day.
Changes
This notice changes when the site changes. The date at the top is the version in force; there is no archive of earlier versions.